---
id: "CVE-2015-1769"
kind: "vulnerability"
aliases: ["CVE-2015-1769"]
title: "Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows\u2026"
severity: "high"
cvss: 7.2
epss: 0.04078
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Windows", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 7", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 8", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 8.1", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows rt", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows rt 8.1", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2008", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2008", "fixed": [], "affected": "= r2", "ecosystem": "vendor"}, {"name": "microsoft windows server 2012", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2012", "fixed": [], "affected": "= r2", "ecosystem": "vendor"}, {"name": "microsoft windows vista", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "self-hosted", "windows"]
not_affected_if: ["non-windows", "patched-windows"]
published_at: "2015-08-15T00:59:01+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1769", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1769", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1769", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…

Windows Mount Manager mishandles symbolic links, letting a local user raise their privileges. An attacker who already has a logon on the machine can gain SYSTEM-level control.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Windows affected ? fixed ?
- vendor:microsoft windows 10 affected ? fixed ?
- vendor:microsoft windows 7 affected ? fixed ?
- vendor:microsoft windows 8 affected ? fixed ?
- vendor:microsoft windows 8.1 affected ? fixed ?
- vendor:microsoft windows rt affected ? fixed ?
- vendor:microsoft windows rt 8.1 affected ? fixed ?
- vendor:microsoft windows server 2008 affected ? fixed ?
- vendor:microsoft windows server 2008 affected = r2 fixed ?
- vendor:microsoft windows server 2012 affected ? fixed ?
- vendor:microsoft windows server 2012 affected = r2 fixed ?
- vendor:microsoft windows vista affected ? fixed ?

## Fix

Apply the Microsoft update for CVE-2015-1769 per vendor instructions (CISA required action); the specific KB number is unknown from the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1769
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2015-1769
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2015-1769

## From the sources

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_